Red Hat Product Errata RHBA-2019:0826 - Bug Fix Advisory
Issued:
2019-04-23
Updated:
2019-04-23

RHBA-2019:0826 - Bug Fix Advisory

Synopsis

scap-security-guide bug fix update

Type/Severity

Bug Fix Advisory

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for scap-security-guide is now available for Red Hat Enterprise Linux 7.

Description

The scap-security-guide project provides a guide for configuration of the system from the final system's security point of view. The guidance is specified in the Security Content Automation Protocol (SCAP) format and constitutes a catalog of practical hardening advice, linked to government requirements where applicable. The project bridges the gap between generalized policy requirements and specific implementation guidelines.

This update fixes the following bugs:

  • Security compliance content adaptation for ubi-minimal (BZ#1698751)
  • This update fixes UBI/UBI-minimal container scanning capabilities, providing better accuracy in scanning results. Rules that are not relevant to the container context, are properly skipped and marked as `notapplicable`. (BZ#1698752)

Users of scap-security-guide are advised to upgrade to these updated packages, which fix these bugs.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux Server 7 x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.6 x86_64
  • Red Hat Enterprise Linux Server - AUS 7.6 x86_64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 x86_64
  • Red Hat Enterprise Linux Workstation 7 x86_64
  • Red Hat Enterprise Linux Desktop 7 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 7 s390x
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.6 s390x
  • Red Hat Enterprise Linux for Power, big endian 7 ppc64
  • Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.6 ppc64
  • Red Hat Enterprise Linux for Scientific Computing 7 x86_64
  • Red Hat Enterprise Linux for Power, little endian 7 ppc64le
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 7.6 ppc64le
  • Red Hat Enterprise Linux Server - TUS 7.6 x86_64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 s390x
  • Red Hat Enterprise Linux for ARM 64 7 aarch64
  • Red Hat Enterprise Linux for Power 9 7 ppc64le
  • Red Hat Enterprise Linux EUS Compute Node 7.6 x86_64
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 7.6 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.6 x86_64
  • Red Hat Enterprise Linux for IBM System z (Structure A) 7 s390x
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 ppc64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7 ppc64le

Fixes

  • BZ - 1698752 - Rules not applicable to containers are not marked as "machine only" anymore [rhel-7.6.z]

CVEs

(none)

References

(none)

Red Hat Enterprise Linux Server 7

SRPM
scap-security-guide-0.1.40-13.el7_6.src.rpm SHA-256: deba59102aba014d7952504cbd87765586b2ae352505291b3094ffe9a9f2e6b5
x86_64
scap-security-guide-0.1.40-13.el7_6.noarch.rpm SHA-256: 6d3f106eb3bf70a9ce49d58006bd5f86f5ddc537aae92962319bc541fe35d61e
scap-security-guide-doc-0.1.40-13.el7_6.noarch.rpm SHA-256: 53ec4a8017111b7844d2d6562c060bcecdfd760480e48e9cef6b827f333850d1

Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.6

SRPM
scap-security-guide-0.1.40-13.el7_6.src.rpm SHA-256: deba59102aba014d7952504cbd87765586b2ae352505291b3094ffe9a9f2e6b5
x86_64
scap-security-guide-0.1.40-13.el7_6.noarch.rpm SHA-256: 6d3f106eb3bf70a9ce49d58006bd5f86f5ddc537aae92962319bc541fe35d61e
scap-security-guide-doc-0.1.40-13.el7_6.noarch.rpm SHA-256: 53ec4a8017111b7844d2d6562c060bcecdfd760480e48e9cef6b827f333850d1

Red Hat Enterprise Linux Server - AUS 7.6

SRPM
scap-security-guide-0.1.40-13.el7_6.src.rpm SHA-256: deba59102aba014d7952504cbd87765586b2ae352505291b3094ffe9a9f2e6b5
x86_64
scap-security-guide-0.1.40-13.el7_6.noarch.rpm SHA-256: 6d3f106eb3bf70a9ce49d58006bd5f86f5ddc537aae92962319bc541fe35d61e
scap-security-guide-doc-0.1.40-13.el7_6.noarch.rpm SHA-256: 53ec4a8017111b7844d2d6562c060bcecdfd760480e48e9cef6b827f333850d1

Red Hat Enterprise Linux Server - Extended Life Cycle Support 7

SRPM
scap-security-guide-0.1.40-13.el7_6.src.rpm SHA-256: deba59102aba014d7952504cbd87765586b2ae352505291b3094ffe9a9f2e6b5
x86_64
scap-security-guide-0.1.40-13.el7_6.noarch.rpm SHA-256: 6d3f106eb3bf70a9ce49d58006bd5f86f5ddc537aae92962319bc541fe35d61e
scap-security-guide-doc-0.1.40-13.el7_6.noarch.rpm SHA-256: 53ec4a8017111b7844d2d6562c060bcecdfd760480e48e9cef6b827f333850d1

Red Hat Enterprise Linux Workstation 7

SRPM
scap-security-guide-0.1.40-13.el7_6.src.rpm SHA-256: deba59102aba014d7952504cbd87765586b2ae352505291b3094ffe9a9f2e6b5
x86_64
scap-security-guide-0.1.40-13.el7_6.noarch.rpm SHA-256: 6d3f106eb3bf70a9ce49d58006bd5f86f5ddc537aae92962319bc541fe35d61e
scap-security-guide-doc-0.1.40-13.el7_6.noarch.rpm SHA-256: 53ec4a8017111b7844d2d6562c060bcecdfd760480e48e9cef6b827f333850d1

Red Hat Enterprise Linux Desktop 7

SRPM
scap-security-guide-0.1.40-13.el7_6.src.rpm SHA-256: deba59102aba014d7952504cbd87765586b2ae352505291b3094ffe9a9f2e6b5
x86_64
scap-security-guide-0.1.40-13.el7_6.noarch.rpm SHA-256: 6d3f106eb3bf70a9ce49d58006bd5f86f5ddc537aae92962319bc541fe35d61e
scap-security-guide-doc-0.1.40-13.el7_6.noarch.rpm SHA-256: 53ec4a8017111b7844d2d6562c060bcecdfd760480e48e9cef6b827f333850d1

Red Hat Enterprise Linux for IBM z Systems 7

SRPM
scap-security-guide-0.1.40-13.el7_6.src.rpm SHA-256: deba59102aba014d7952504cbd87765586b2ae352505291b3094ffe9a9f2e6b5
s390x
scap-security-guide-0.1.40-13.el7_6.noarch.rpm SHA-256: 6d3f106eb3bf70a9ce49d58006bd5f86f5ddc537aae92962319bc541fe35d61e
scap-security-guide-doc-0.1.40-13.el7_6.noarch.rpm SHA-256: 53ec4a8017111b7844d2d6562c060bcecdfd760480e48e9cef6b827f333850d1

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.6

SRPM
scap-security-guide-0.1.40-13.el7_6.src.rpm SHA-256: deba59102aba014d7952504cbd87765586b2ae352505291b3094ffe9a9f2e6b5
s390x
scap-security-guide-0.1.40-13.el7_6.noarch.rpm SHA-256: 6d3f106eb3bf70a9ce49d58006bd5f86f5ddc537aae92962319bc541fe35d61e
scap-security-guide-doc-0.1.40-13.el7_6.noarch.rpm SHA-256: 53ec4a8017111b7844d2d6562c060bcecdfd760480e48e9cef6b827f333850d1

Red Hat Enterprise Linux for Power, big endian 7

SRPM
scap-security-guide-0.1.40-13.el7_6.src.rpm SHA-256: deba59102aba014d7952504cbd87765586b2ae352505291b3094ffe9a9f2e6b5
ppc64
scap-security-guide-0.1.40-13.el7_6.noarch.rpm SHA-256: 6d3f106eb3bf70a9ce49d58006bd5f86f5ddc537aae92962319bc541fe35d61e
scap-security-guide-doc-0.1.40-13.el7_6.noarch.rpm SHA-256: 53ec4a8017111b7844d2d6562c060bcecdfd760480e48e9cef6b827f333850d1

Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.6

SRPM
scap-security-guide-0.1.40-13.el7_6.src.rpm SHA-256: deba59102aba014d7952504cbd87765586b2ae352505291b3094ffe9a9f2e6b5
ppc64
scap-security-guide-0.1.40-13.el7_6.noarch.rpm SHA-256: 6d3f106eb3bf70a9ce49d58006bd5f86f5ddc537aae92962319bc541fe35d61e
scap-security-guide-doc-0.1.40-13.el7_6.noarch.rpm SHA-256: 53ec4a8017111b7844d2d6562c060bcecdfd760480e48e9cef6b827f333850d1

Red Hat Enterprise Linux for Scientific Computing 7

SRPM
scap-security-guide-0.1.40-13.el7_6.src.rpm SHA-256: deba59102aba014d7952504cbd87765586b2ae352505291b3094ffe9a9f2e6b5
x86_64
scap-security-guide-0.1.40-13.el7_6.noarch.rpm SHA-256: 6d3f106eb3bf70a9ce49d58006bd5f86f5ddc537aae92962319bc541fe35d61e
scap-security-guide-doc-0.1.40-13.el7_6.noarch.rpm SHA-256: 53ec4a8017111b7844d2d6562c060bcecdfd760480e48e9cef6b827f333850d1

Red Hat Enterprise Linux for Power, little endian 7

SRPM
scap-security-guide-0.1.40-13.el7_6.src.rpm SHA-256: deba59102aba014d7952504cbd87765586b2ae352505291b3094ffe9a9f2e6b5
ppc64le
scap-security-guide-0.1.40-13.el7_6.noarch.rpm SHA-256: 6d3f106eb3bf70a9ce49d58006bd5f86f5ddc537aae92962319bc541fe35d61e
scap-security-guide-doc-0.1.40-13.el7_6.noarch.rpm SHA-256: 53ec4a8017111b7844d2d6562c060bcecdfd760480e48e9cef6b827f333850d1

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 7.6

SRPM
scap-security-guide-0.1.40-13.el7_6.src.rpm SHA-256: deba59102aba014d7952504cbd87765586b2ae352505291b3094ffe9a9f2e6b5
ppc64le
scap-security-guide-0.1.40-13.el7_6.noarch.rpm SHA-256: 6d3f106eb3bf70a9ce49d58006bd5f86f5ddc537aae92962319bc541fe35d61e
scap-security-guide-doc-0.1.40-13.el7_6.noarch.rpm SHA-256: 53ec4a8017111b7844d2d6562c060bcecdfd760480e48e9cef6b827f333850d1

Red Hat Enterprise Linux Server - TUS 7.6

SRPM
scap-security-guide-0.1.40-13.el7_6.src.rpm SHA-256: deba59102aba014d7952504cbd87765586b2ae352505291b3094ffe9a9f2e6b5
x86_64
scap-security-guide-0.1.40-13.el7_6.noarch.rpm SHA-256: 6d3f106eb3bf70a9ce49d58006bd5f86f5ddc537aae92962319bc541fe35d61e
scap-security-guide-doc-0.1.40-13.el7_6.noarch.rpm SHA-256: 53ec4a8017111b7844d2d6562c060bcecdfd760480e48e9cef6b827f333850d1

Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7

SRPM
scap-security-guide-0.1.40-13.el7_6.src.rpm SHA-256: deba59102aba014d7952504cbd87765586b2ae352505291b3094ffe9a9f2e6b5
s390x
scap-security-guide-0.1.40-13.el7_6.noarch.rpm SHA-256: 6d3f106eb3bf70a9ce49d58006bd5f86f5ddc537aae92962319bc541fe35d61e
scap-security-guide-doc-0.1.40-13.el7_6.noarch.rpm SHA-256: 53ec4a8017111b7844d2d6562c060bcecdfd760480e48e9cef6b827f333850d1

Red Hat Enterprise Linux for ARM 64 7

SRPM
scap-security-guide-0.1.40-13.el7_6.src.rpm SHA-256: deba59102aba014d7952504cbd87765586b2ae352505291b3094ffe9a9f2e6b5
aarch64
scap-security-guide-0.1.40-13.el7_6.noarch.rpm SHA-256: 6d3f106eb3bf70a9ce49d58006bd5f86f5ddc537aae92962319bc541fe35d61e
scap-security-guide-doc-0.1.40-13.el7_6.noarch.rpm SHA-256: 53ec4a8017111b7844d2d6562c060bcecdfd760480e48e9cef6b827f333850d1

Red Hat Enterprise Linux for Power 9 7

SRPM
scap-security-guide-0.1.40-13.el7_6.src.rpm SHA-256: deba59102aba014d7952504cbd87765586b2ae352505291b3094ffe9a9f2e6b5
ppc64le
scap-security-guide-0.1.40-13.el7_6.noarch.rpm SHA-256: 6d3f106eb3bf70a9ce49d58006bd5f86f5ddc537aae92962319bc541fe35d61e
scap-security-guide-doc-0.1.40-13.el7_6.noarch.rpm SHA-256: 53ec4a8017111b7844d2d6562c060bcecdfd760480e48e9cef6b827f333850d1

Red Hat Enterprise Linux EUS Compute Node 7.6

SRPM
scap-security-guide-0.1.40-13.el7_6.src.rpm SHA-256: deba59102aba014d7952504cbd87765586b2ae352505291b3094ffe9a9f2e6b5
x86_64
scap-security-guide-0.1.40-13.el7_6.noarch.rpm SHA-256: 6d3f106eb3bf70a9ce49d58006bd5f86f5ddc537aae92962319bc541fe35d61e
scap-security-guide-doc-0.1.40-13.el7_6.noarch.rpm SHA-256: 53ec4a8017111b7844d2d6562c060bcecdfd760480e48e9cef6b827f333850d1

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 7.6

SRPM
scap-security-guide-0.1.40-13.el7_6.src.rpm SHA-256: deba59102aba014d7952504cbd87765586b2ae352505291b3094ffe9a9f2e6b5
ppc64le
scap-security-guide-0.1.40-13.el7_6.noarch.rpm SHA-256: 6d3f106eb3bf70a9ce49d58006bd5f86f5ddc537aae92962319bc541fe35d61e
scap-security-guide-doc-0.1.40-13.el7_6.noarch.rpm SHA-256: 53ec4a8017111b7844d2d6562c060bcecdfd760480e48e9cef6b827f333850d1

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.6

SRPM
scap-security-guide-0.1.40-13.el7_6.src.rpm SHA-256: deba59102aba014d7952504cbd87765586b2ae352505291b3094ffe9a9f2e6b5
x86_64
scap-security-guide-0.1.40-13.el7_6.noarch.rpm SHA-256: 6d3f106eb3bf70a9ce49d58006bd5f86f5ddc537aae92962319bc541fe35d61e
scap-security-guide-doc-0.1.40-13.el7_6.noarch.rpm SHA-256: 53ec4a8017111b7844d2d6562c060bcecdfd760480e48e9cef6b827f333850d1

Red Hat Enterprise Linux for IBM System z (Structure A) 7

SRPM
scap-security-guide-0.1.40-13.el7_6.src.rpm SHA-256: deba59102aba014d7952504cbd87765586b2ae352505291b3094ffe9a9f2e6b5
s390x
scap-security-guide-0.1.40-13.el7_6.noarch.rpm SHA-256: 6d3f106eb3bf70a9ce49d58006bd5f86f5ddc537aae92962319bc541fe35d61e
scap-security-guide-doc-0.1.40-13.el7_6.noarch.rpm SHA-256: 53ec4a8017111b7844d2d6562c060bcecdfd760480e48e9cef6b827f333850d1

Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7

SRPM
scap-security-guide-0.1.40-13.el7_6.src.rpm SHA-256: deba59102aba014d7952504cbd87765586b2ae352505291b3094ffe9a9f2e6b5
ppc64
scap-security-guide-0.1.40-13.el7_6.noarch.rpm SHA-256: 6d3f106eb3bf70a9ce49d58006bd5f86f5ddc537aae92962319bc541fe35d61e
scap-security-guide-doc-0.1.40-13.el7_6.noarch.rpm SHA-256: 53ec4a8017111b7844d2d6562c060bcecdfd760480e48e9cef6b827f333850d1

Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7

SRPM
scap-security-guide-0.1.40-13.el7_6.src.rpm SHA-256: deba59102aba014d7952504cbd87765586b2ae352505291b3094ffe9a9f2e6b5
ppc64le
scap-security-guide-0.1.40-13.el7_6.noarch.rpm SHA-256: 6d3f106eb3bf70a9ce49d58006bd5f86f5ddc537aae92962319bc541fe35d61e
scap-security-guide-doc-0.1.40-13.el7_6.noarch.rpm SHA-256: 53ec4a8017111b7844d2d6562c060bcecdfd760480e48e9cef6b827f333850d1

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.